APAR status
Closed as program error.
Error description
The CWPKI0045E indicates a signer with a SubjectDN was sent from a remote server, and that a signer with that SubjectDN may need to be added to the truststore as seen below: ---- CWPKI0045E: SSL HANDSHAKE FAILURE: A signer with SubjectDN ?CN=hostname,OU=Company" was sent from a target host. The signer may need to be added to local trust store ?safkeyring:///WASkeyring" located in SSL configuration alias ?NodeDefaultSSLSettings" loaded from SSL configuration file ?security.xml?. ---- The certificate with SubjectDN is the personal certificate sent from the remote server, and the signer certificate that signed that personal certificate would need to be added to the truststore.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All users of IBM WebSphere Application * * Server * **************************************************************** * PROBLEM DESCRIPTION: A serviceability improvement to the * * CWPKI0045E message to make the proposed * * solution more precise. * **************************************************************** * RECOMMENDATION: * **************************************************************** A serviceability improvement to the CWPKI0045E message to make the proposed solution more precise.
Problem conclusion
The fix for this APAR is targeted for inclusion in fix pack 8.5.5.21 and 9.0.5.10. For more information, see 'Recommended Updates for WebSphere Application Server': https://www.ibm.com/support/pages/node/715553
Temporary fix
Comments
APAR Information
APAR number
PH37067
Reported component name
WEBSPHERE FOR Z
Reported component ID
5655I3500
Reported release
850
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2021-05-10
Closed date
2021-07-13
Last modified date
2021-07-13
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WEBSPHERE FOR Z
Fixed component ID
5655I3500
Applicable component levels
R850 PSY
UP
[{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"850"}]
Document Information
Modified date:
16 July 2021